{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "patch vulnerability", "trigger": true, "arguments": ["releaser", "time", "common vulnerabilities and exposures", "vulnerable system version", "supported platform", "patch number", "vulnerable system"]}, {"event_type": "data breach", "trigger": true, "arguments": ["time", "attack pattern", "number of victim", "number of data", "place", "victim", "compromised data", "damage amount", "attacker", "tool"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerable system", "vulnerable system version", "discoverer", "supported platform", "vulnerability", "common vulnerabilities and exposures", "time", "vulnerable system owner"]}, {"event_type": "ransom", "trigger": true, "arguments": ["time", "payment method", "tool", "damage amount", "attacker"]}, {"event_type": "phishing", "trigger": true, "arguments": ["tool", "attacker", "victim", "time", "purpose", "trusted entity", "damage amount", "place", "attack pattern"]}], "input": "A new wave of these attacks involves attackers sending status updates for invoices -- but these do n't just involve threat actors firing off millions of messages at random and hoping for the best ; they 're specially crafting the attacks to look authentic and crucially , from someone the target might trust ."}
{"patch vulnerability": [], "data breach": [], "discover vulnerability": [], "ransom": [], "phishing": [{"trigger": "sending", "arguments": {"tool": "invoices", "attacker": "attackers", "victim": "NAN", "time": "NAN", "purpose": "NAN", "trusted entity": "NAN", "damage amount": "NAN", "place": "NAN", "attack pattern": "NAN"}}]}